Forum Discussion

AmandaCL's avatar
AmandaCL
MYOB Moderator
7 months ago

Setting up additional two-factor authentication methods

Hey everyone!

 

We're introducing a new way to secure your accounts with additional two-factor authentication (2FA) methods.

 

This will prevent sign-in hassles and getting locked out if you can't get codes via your usual method.

 

We recommend setting this up now to ensure you have a backup method to login without needing to contact us.

 

You can set up:

- Authenticator app (recommended) on a mobile phone or tablet

- SMS sent to your mobile phone

- Email (if set up initially)

 

Instructions to set up an additional 2FA method:

1. Log into My Account (myaccount.myob.com).

2. Click your user name in the top-right corner and choose Account security.

3. Click the Add (>) button for the desired 2FA method.

4. Verify your identity with a 2FA code.

5. Follow the prompts to complete the setup.

 

Once set up, you'll be able to receive verification codes via different methods. If you need to remove or reset a 2FA method, you can do so from the same Account security menu.

 

For detailed steps, feel free to check out our Setting up additional two-factor authentication (2FA) methods help article.

 

Cheers, Amanda. 

 

  • MickyH75's avatar
    MickyH75
    Experienced User

    Not liking this change at all. Xero is looking better by the day even though it would probably take a chunk of my time to switch over with 21 company files to move.

  • Amy1's avatar
    Amy1
    Contributing Cover User

    Hi,

     

    I am a business owner and I have the Authenticator app on my phone for all accounts. As we used to only have to do this once a month, the staff would just ask me for the code on those occasions.

     

    Now that this needs to be done daily, they are some times in earlier than I am and they cannot sit around waiting for me to log in for  1 hour before I get to the office each day. 

     

    I still need to keep the  authenticator on my phone for their accounts as the boss but how can they also get 2FA for their individual logins whilst I also have it?

    Kind regards,

    Amy

    • AmandaCL's avatar
      AmandaCL
      MYOB Moderator

      Hey Amy1

      Your employees can set up additional methods to receive their two-factor authentication codes. This will allow them to select a different method if they are unable to access codes through their usual way.

      Instructions to set up an additional 2FA method:

      1. Log into My Account (myaccount.myob.com).
      2. Click your user name in the top-right corner and choose Account security.
      3. Click the Add (>) button for the desired 2FA method.
      4. Verify your identity with a 2FA code.
      5. Follow the prompts to complete the setup.

       

      Let me know if you have any further questions!

  • H-TS's avatar
    H-TS
    Trusted User

    Has anyone successfully set up the google authenticator as a secondary option? I've tried both the code and qr scan methods and they both just take me back to the main screen on the authenticator app without actually adding MYOB. Maybe it's an authenticator app issue but figured I'd ask here first since I'm here.

     

  • bmeavaccounts's avatar
    bmeavaccounts
    Contributing User

    The 2FA email is taking between 30 minutes and 1 hour to come through. This is far too long to be waiting to begin work. Why is this happening?

  • Why not fix your horrible login screen/flow, we shouldn't have to click sign-in twice, once for the email and then another time for the password.... you've added an extra click for the sake of an extra click and screwing some password managers from working...

     

    Also 2FA would be alot less painful if you would enable SAML/SSO and push notifications for mobile phones, while Xero doesn't do SAML/SSO... They do do push notifications, which makes is alot less depressing when you have to sign back in every few hours.

     

    MYOB Also has issues where some of it's cookies like to cause the login screen to go into an infinite re-direct loop...